Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: fltcFcXbSizpWlw9kKyeMNGQbvCAI/N7ZjRKrJVHi2g=
Subject key identifier: 17:46:D2:7B:E5:B7:DE:8F:F4:E4:D4:E4:C7:CB:9D:65:36:2D:96:33
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 0199FB46157DC2E25868CB771477C87776C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 07:01:38 +0000
Manifest this update: Sun 19 Oct 2025 07:01:38 +0000
Manifest next update: Mon 20 Oct 2025 07:01:38 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: Kj2Ey5IbXE54oR6QAEFaHeWpsAhtxU/up6KplrmwJFM=)
2: J4rQ9gsrKayiuOOExEGxMHRTLss.roa (hash: J+BOWsTNmfnM3hLMHXcZYhZuZ1oIUj5I4r3BR6mevWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:15:7d:c2:e2:58:68:cb:77:14:77:c8:77:76:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Oct 19 07:01:38 2025 GMT
Not After : Oct 20 07:01:38 2025 GMT
Subject: CN=1746d27be5b7de8ff4e4d4e4c7cb9d65362d9633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:e9:54:56:65:44:31:ef:42:85:4c:a2:58:
04:d1:51:0b:82:59:1e:2f:21:4d:38:40:13:ba:49:
8f:a2:bb:44:39:5f:1e:97:34:ad:3b:86:93:b8:35:
11:4c:58:37:c0:7c:30:30:38:c4:a4:a5:4c:8f:cc:
29:40:26:09:66:69:27:ab:2b:5a:0d:69:ee:36:5e:
f9:f5:10:7e:87:c8:80:48:6d:c6:f9:06:1b:eb:c1:
2e:64:88:1f:04:3a:04:0e:a0:3a:02:41:df:5c:31:
ae:ac:5a:28:c8:be:43:94:d0:8e:a0:65:d3:69:97:
c8:d4:f4:77:56:bf:58:c1:ee:ee:57:6f:30:bb:2c:
f5:3f:ad:07:14:a3:a5:a8:85:32:32:6f:e0:a2:36:
1b:4b:5d:4f:32:1b:2e:d6:1a:78:7d:73:ed:4f:03:
b9:b4:92:cb:ce:1a:60:e3:83:5d:8c:91:ed:47:a3:
c4:e8:04:23:34:00:2c:75:00:fa:39:b4:4f:58:e5:
90:0f:53:7d:00:09:28:09:5e:ef:12:0d:df:3b:3e:
84:f0:1a:bc:57:89:82:ea:ce:35:8e:c0:41:58:62:
da:dd:be:85:eb:5d:62:32:56:dc:50:64:47:f7:28:
66:87:7a:00:6b:eb:ad:6c:65:b5:2f:2b:3a:ea:b4:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:46:D2:7B:E5:B7:DE:8F:F4:E4:D4:E4:C7:CB:9D:65:36:2D:96:33
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9d:86:22:f9:d5:b8:bc:87:d8:57:f8:23:de:f5:c7:06:c1:
23:55:90:4f:7a:74:dc:e6:91:55:20:63:f8:f2:4f:f2:30:aa:
83:29:b8:5c:ed:3d:f2:45:b5:fa:b2:49:59:3e:1c:f2:be:36:
ea:c1:ec:8b:ca:46:43:53:10:9a:6f:f3:85:53:e4:7d:33:c9:
0d:db:99:96:d8:dd:a2:b6:18:ef:9d:13:39:21:76:d4:a7:31:
4a:eb:7c:3f:2c:5e:92:52:e5:41:d9:c6:3f:5e:97:3b:e6:fe:
bc:e0:91:dc:3a:f6:a4:bf:0b:2b:a5:b7:ed:20:af:a5:82:d8:
40:09:79:21:1e:f7:6c:53:0b:99:12:74:b9:5e:a2:03:da:7f:
8d:6a:22:ed:7a:12:7e:f7:ca:6c:f1:ef:66:f2:d3:3e:f8:17:
fb:e4:e1:85:20:7b:da:09:32:73:e0:f8:7d:bc:27:07:3a:bc:
93:e0:98:81:b1:2e:31:ae:10:3f:3e:08:79:17:56:9a:c6:0f:
c6:ac:9a:e8:ac:f9:63:18:ec:27:cf:ba:4c:97:60:4f:f6:f9:
51:88:85:ff:63:3e:99:df:f7:5f:41:88:e0:d6:d3:92:5c:f5:
c1:5a:77:b2:b6:37:b2:f5:62:01:48:6e:52:f2:2b:4a:1f:e5:
0e:8e:d0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:31 2025 by rpki-client